Security analysis and improvement of the efficient password-based authentication protocol

IEEE Communications Letters

Volumn 9, Issue 1, 2005, Pages 93-95

  Kwon, Taekyoung ^a   Park, Young Ho ^b   Lee, Hee Jung ^c  

^a Sejong University   (South Korea)

^b Sejong Cyber University   (South Korea)

^c Kangnam University   (South Korea)

Author keywords

Authentication protocol; Information security; Security analysis

Indexed keywords

CRYPTOGRAPHY; DATA PRIVACY; SECURITY OF DATA; SERVERS; THEOREM PROVING;

AUTHENTICATED KEY EXCHANGE; AUTHENTICATION PROTOCOL; SECURITY ANALYSIS; SERVER COMPROMISE;

NETWORK PROTOCOLS;

EID: 12544254099     PISSN: 10897798     EISSN: None     Source Type: Journal    
DOI: 10.1109/LCOMM.2005.01032     Document Type: Article

References (11)

1. S. Bellovin and M. Merritt, "Encrypted key exchange: password-based protocols secure against dictionary attacks," in IEEE Symposium on Research in Security and Privacy, pp. 72-84, 1992.
2. S. Bellovin and M. Merritt, "Augmented encrypted key exchange: a password-based protocol secure against dictionary attacks and password-file compromise," in ACM Conference on Computer and Communications Security, pp, 244-250, 1993.
3. D. Boneh, "The Decision Diffie-Hellman Problem," ANTS-III, Lecture Notes in Computer Science (1423), Springer-Veralg, Portland, USA, June 1998.
4. Y. Hwang, D. Yum, and P. Lee, "EPA: an efficient password-based protocol for authenticated key exchange," ACISP, Lecture Notes in Computer Science (2727), Springer-Veralg, Wollongong, Austrialia, July 2003.
5. IEEE P1363.2, Password-Based Public-Key Cryptography, http:// grouper.ieee.org/groups/1363/passwdPK/index.html and http:// grouper.ieee.org/groups/1363/passwdPK/contributions.html
6. D. Jablon, "Strong password-only authenticated key exchange," ACM Computer Communications Review, vol. 26, pp. 5-26, May 1996.
7. D. Jablon, "Extended password key exchange protocols," in WETICE Workshop on Enterprise Security, pp. 248-255, 1997.
8. T. Kwon, "Authentication and key agreement via memorable password," in ISOC Network and Distributed System Security Symposium, Feb. 2001, pp. 73-85.
9. P. MacKenzie, "The PAK Suite: Protocols for Password-Authenticated Key Exchange," submission to IEEE P1363.2, Apr. 2002.
10. A. Menezes, P. van Oorschot, and S. Vanstone, Handbook of Applied Cryptography, CRC Press, Inc., pp. 517-518, 1997.
11. T. Wu, "Secure remote password protocol," in ISOC Network and Distributed System Security Symposium, 1998, pp. 97-111.